[Freeipa-users] Replication failing on FreeIPA 4.2.0 plus ldapmodify freezes up

[Mark Reynolds]

On 01/12/2016 06:16 PM, Nathan Peters wrote:
> [12/Jan/2016:23:11:23 +0000] NSMMReplicationPlugin - agmt="cn=meTodc1-ipa-dev-nvan.mydomain.net" (dc1-ipa-dev-nvan:389): replay_update: Sending modify operation (dn="fqdn=mole2-mh-interopsnap1-nvan.mydomain.net,cn=computers,cn=accounts,dc=mydomain,dc=net" csn=56958906000000040000)
> [12/Jan/2016:23:11:23 +0000] NSMMReplicationPlugin - agmt="cn=meTodc1-ipa-dev-nvan.mydomain.net" (dc1-ipa-dev-nvan:389): replay_update: modifys operation (dn="fqdn=mole2-mh-interopsnap1-nvan.mydomain.net,cn=computers,cn=accounts,dc=mydomain,dc=net" csn=56958906000000040000)*not sent - empty*
> [12/Jan/2016:23:11:23 +0000] NSMMReplicationPlugin - agmt="cn=meTodc1-ipa-dev-nvan.mydomain.net" (dc1-ipa-dev-nvan:389): replay_update: Consumer successfully sent operation with csn 56958906000000040000
> [12/Jan/2016:23:11:23 +0000] NSMMReplicationPlugin - agmt="cn=meTodc1-ipa-dev-nvan.mydomain.net" (dc1-ipa-dev-nvan:389): Skipping update operation with no message_id (uniqueid 5a395106-b42a11e5-b6d1a094-64a60b74, CSN 56958906000000040000):
There is a series of updates like above that all have empty 
modifications (modifications that have been striped and are now empty) 
so it never sends those "empty" updates.  Replication then keeps trying 
to send this same series of operations over and over. But it's not 
finding any updates in the changelog that are not stripped.  So, can you 
make an update to entry (change a password, add a description attribute, 
whatever) and see what the logging shows and if that update replicates?  
Grep for "agmt="cn=meTodc1-ipa-dev-nvan.mydomain.net" and check the 
timestamps.

I'm also only seeing issues when updates going to 
"dc1-ipa-dev-nvan:389", other replication agreements seem fine and 
accept the updates.  Can any of the other replicas update dc1?

Also, you can ignore:

[12/Jan/2016:04:20:23 +0000] NSMMReplicationPlugin - replication keep
alive entry <cn=repl keep alive 5,dc=mycompany,dc=net> already exists

These messages were not supposed to be logged by default.

Mark

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160112/a0d04272/attachment.htm>